The following steps outline how to install OpenFire on Windows Server 2003 as a service with Active Directory using the Pidgin client. These steps apply to Openfire 3.5.1 and may change with later versions.

  1. Download the OpenFire Windows installer and run it. Once the install is complete there should be a checkbox that says "Run OpenFire", make sure this is checked and click Finish.
  2. The OpenFire GUI should now appear, once the server is started the LaunchAdmin button will be enabled, click it. This will open the configuration wizard in a browser.
  3. Configure the server as follows:
    1. Language Selection: Choose your speak
    2. Server Settings: Accept the defaults unless you need to change these.
    3. Database Settings: This tutorial assumes an embedded database. If you need to run OpenFire in a demanding environment you will probably want to use an external database.
    4. Profile Settings: Choose the Directory Server (LDAP) option and click Continue.
      1. Connection Settings: Set the Host to an Active Directory server and accept the default port. Set the distinguished name (DN) to the base location of your users. All users in this and child objects will be available to Openfire. The first portion of the DN is the base object name. To reference a built in object like Users you would use the canonical name identifier; cn=Users. For a custom organization unit object you would use the OU identifier; ou=MyOrgUnit. The following domain objects use the domain class identifier, dc=. So for the domain denver.mycompany.int the second portion of the DN would be dc=denver,dc=mycompany,dc=int. Next specify a user that has rights to access the Active Directory store. This account only needs to be in the Domain Users group (Unless you want to be able to write back to AD). The DN of this user can be specified as a fully qualified username; MyDomain\Username. One a side note, the password field has a limit of 30 characters so if you are using a password that exceeds this length it will be truncated and your account will not authenticate. Press Test Settings to verify your settings and press Save & Continue if they test successfully.

        image

      2. User Mapping: Accept the defaults and press Save & Continue.
      3. Group Mapping: Accept the defaults and press Save & Continue.
    5. Administrator Account: Enter the username (This username is not fully qualified; just use the username without the domain) of the user who will administer the OpenFire server. You can add as many administrators as you wish. Press Continue.
    6. Once the setup is complete press Login to the admin console and login with an admin account you specified in the last step. If you run into any issues (Like not being able to add admins or a server error on the last page in the wizard) try uninstalling and reinstalling.
  4. In the admin you can set a number of settings, here are a few that I was interested in:
    1. Server Settings
      1. Server to Server Settings
        1. Service Enabled = False
      2. Registration Settings
        1. Inband Account Registration = Disabled
        2. Change Password = Disabled
        3. Anonymous Login = Disabled
      3. Offline Messages
        1. Store\Always Store
      4. Security Settings
        1. Client Connection Security = Required
  5. Now close out the OpenFire GUI, press Quit.
  6. Open a command prompt and set your working directory as C:\Program Files\Openfire\bin or whatever your OpenFire install directory is.
  7. Run the following two commands to install the OpenFire service and to start it:

    openfire-service /install
    openfire-service /start

 

The following steps demonstrate how to setup Pidgin to connect to the OpenFire server you just installed.

  1. Download and install Pidgin here.
  2. Once Pidgin is running right-click the icon in the systray and select Accounts.
  3. Add a new account.
    1. Under the Basic tab enter the following information:
      1. Protocol: XMPP
      2. Screen Name: Your domain username (This username is not fully qualified; just use the username without the domain).
      3. Domain: The name of the server OpenFire is running on.
      4. Resource: Doesn't matter.
      5. Password: Guess....
      6. Local Alias: Whatever you want.
    2. Under the Advanced tab enter the following information:
      1. Require SSL/TLS: Unchecked
      2. Force old (port 5223) SSL: Checked
      3. Allow plaintext auth...: Unchecked
      4. Connect port: 5223
      5. Connect server: Blank
      6. File transfer proxies: The name of the server with port 7777 specified (IE MyOpenFireServer:7777).
      7. Proxy type: Use the default.
    3. Click Save
  4. To browse for users goto Accounts|{username}@{servername}/{resource} (XMPP)|Search for users....
  5. In the Enter a User Directory dialog accept the default and click Search Directory.
  6. In the Advanced User Search dialog enter an asterisk (Or a search string) and click ok. This will return a list of users that you can now add as buddies.